Web TechnologiesCourse and practice

Cheat sheet: Public and secret

The 37 terms of this lesson, part by part, with the French word a team in France would use.

Back to the lessonAll terms

1. Your copy of the page

Inspectinspecter
the right-click choice that opens the developer tools on one part of the page, with its live HTML and style rules.
Developer toolsoutils de développement
the panels built into every browser, opened with F12, that show a page's code, style rules and errors.
Page sourcecode source de la page
the HTML exactly as the server sent it, shown when you right-click a page and choose "View page source".
Hidden fieldchamp caché
a form field that the visitor can't see on the page, but which is in the HTML and can be read and changed.
Obfuscationobfuscation
making code hard to read on purpose, which hides nothing, because the browser must still understand it.
Minificationminification
removing spaces and shortening names in code, so the files are smaller and load faster.
Internal tooloutil interne
an app built only for a company's own staff, such as a dashboard or a booking tool for the team.
Repositorydépôt
the project's folder, also called a repo, with all its files and the history of every saved change.

2. A secret key in the page

AI agentagent d'IA
a program that reads and writes a project's files and runs commands, following your requests in a chat.
Secret keyclé secrète
a code that gives power over your account, such as sending messages or moving money, so it must stay on a server.
Server functionfonction serveur, fonction serverless
a small piece of back-end code that the company runs, which the page can call to do one job.
Environment variablevariable d'environnement
a value, such as a key, that the code reads from the computer it runs on.
Revokerévoquer
to cancel a key at the service, so that it stops working for anyone who has a copy.
Rate limitlimite de requêtes, rate limit
a maximum number of requests allowed in a given time, such as 100 per hour for each user.
Spending limitplafond de dépenses
a maximum amount that a service may charge you each month, which you set in your account.

3. Keys that are public on purpose

API keyclé d'API
a code that identifies a site to an outside service; a secret key must stay on a server, never in the page.
Publishable keyclé publiable, clé publique
a code made to be in the page, which only tells a service which project is calling and gives no power on its own.
Secret keyclé secrète
a code that gives power over your account, such as sending messages or moving money, so it must stay on a server.
StripeStripe
an online payment service that many websites use to accept card payments.
FirebaseFirebase
a Google service that rents you a ready-made back end, with a database, logins and file storage.
Domain restrictionrestriction de domaine
a setting that lets a public key work only on the websites you list, such as your own domain.
Quotaquota
a limit on how much you can use a service in a given time, such as a number of map views per day.

4. What really protects the data

Security rulesrègles de sécurité
rules kept at a service such as Firebase that decide who can read or change each piece of data.
Test modemode test
a starting setting in Firebase that lets anyone on the internet read and change the whole database.
FirebaseFirebase
a Google service that rents you a ready-made back end, with a database, logins and file storage.
Back endback-end
the part of a site that runs on a server, such as accounts, data and rules, which visitors never see.
Quotaquota
a limit on how much you can use a service in a given time, such as a number of map views per day.
Logged outdéconnecté
not signed in to any account, so the site treats you as an unknown visitor.
Data leakfuite de données
a situation where private data can be read by people who should not have access to it.

5. What to ask

Secret keyclé secrète
a code that gives power over your account, such as sending messages or moving money, so it must stay on a server.
Publishable keyclé publiable, clé publique
a code made to be in the page, which only tells a service which project is calling and gives no power on its own.
Revokerévoquer
to cancel a key at the service, so that it stops working for anyone who has a copy.
Security rulesrègles de sécurité
rules kept at a service such as Firebase that decide who can read or change each piece of data.
Domain restrictionrestriction de domaine
a setting that lets a public key work only on the websites you list, such as your own domain.
Rate limitlimite de requêtes, rate limit
a maximum number of requests allowed in a given time, such as 100 per hour for each user.
Spending limitplafond de dépenses
a maximum amount that a service may charge you each month, which you set in your account.
GDPRRGPD
the European law on personal data, which applies as soon as a site collects a name or an email.

Web Technologies · The map · wt.thomasjuldo.com/course/the-map/public-and-secret